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DETAILED ACTION 

1. Claims 1-47 are presented for examination. 

Claim Objections 

2. Claim 22 is objected to because of the following informalities: claim 22 on page 39 lines 
12, is unclear where it is opened. Appropriate correction is required. 

3. Claim 25 is objected to because of the following informalities: claim 25 on page 41 lines 
5, is unclear where it is opened. Appropriate correction is required. 

4. Claim 27 is objected to because of the following informalities: claim 27 on page 43 lines 
12, is unclear where it is opened. Appropriate correction is required. 

5. Claim 34 is objected to because of the following informalities: claim 34 on page 46 lines 
21-24, "(pi. P ) (1<= x(sub (i)) = C^(((p(sub i)+l) (3 )/4) mod p(sub i) i<=h)" is unclear, where 
i is between 1 and h. Appropriate correction is required. 

6. Claim 39 is objected to because of the following informalities: claim 39 on page 48 lines 
9, "creating ml,p and ml,q by" unfinished sentence. Appropriate correction is required. 

7. Claim 40 is objected to because of the following informalities: claim 40 on page 48 lines 
19, "creating ml,p and ml,q by" unfinished sentence. Appropriate correction is required. 

Claim Rejections - 35 USC § 112 

8. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 
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9. Claims 22-28, 29-31, 33-38, and 40 are rejected under 35 U.S.C. 112, second paragraph, 
as being indefinite for failing to particularly point out and distinctly claim the subject matter 
which applicant regards as the invention because 

on Fig. 7-9 symbol "© " is used x=(mO^(kl) ® G(r))||(r ® H(mO^(kl) © G(r))) 

on the claims 22-28, 29-31, 33-38, and 40 symbol "O "is used, they are different symbols with 
different meanings. Appropriate correction is required. 

Claim Rejections - 35 USC § 103 

1 0. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

11. Claims 1-2, 4-5, 9-11, 32, 39, 41-42, and 45-47 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Rivest et al. (Rivest, U.S. Patent 4,405,829) in view of Claude Crepeau 
(Crepeau NPL, Computer Science 308-547A Cryptography and Data Security 1998-1999). 

11.1 As per claim 1 , Rivest teaches the communication method using public key cryptosystem 
by which a sender device encrypts send data by using a receiver's public key, the method 
comprising: 

a key generating step of generating a secret key (p, q, p ) satisfying 

• p, q : prime integers, p E 3 (mod 4), q E 3 (mod 4) 

• P e Z, a i8 E 1 (mod 1cm (p - 1, q - 1)) 

and 

• n = p'^d q . (d > 1 is odd.) 
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• k : binary length of pq 

• a e Z, 

a public key (n, k, a ) satisfying (Rivest, Col. 13 lines 29-34; teaches using a modulus n 

which is a product of three or more primes (not necessarily distinct)); 

from the ciphertext (C, a), and regarding as the plaintext m any of $(m(subl, p), m(sub 1, 
q)), $(-m(subl, p), m(sub 1, q)), ^>(m(subl, p), -m(sub 1, q)), and *(-m(subl, p), -m(sub 1, 
q)), that satisfies (x/n)=a and 0<x<2^(k-2), where $ denotes ring isomorphism mapping from 
Z/(p)xZ/(q) to Z/(pq) by the Chinese remainder theorem (Rivest Col. 13 lines 29-34; teaches 
"Chinese remaindering" or any equivalent method to obtain the result modulo n in using a 
product of three or more primes); 

Rivest do not explicitly teach encrypting step performed by the sender device, of 
C = m^(2na ) mod n; 
Jacobi's symbol a=(m/n); and 

receiver device, of using the receiver's secret key (p, q, p ) to compute 
m(sub l,p) = C^(((p+1) p (sub q)^-l)/4) mod p, 
m(sub l,q) = C^(((q+1) p (sub p)^-d)/4) mod q. 

However Crepeau NPL teaches: (1) an encrypting step performed by the sender device, 
of C ^ m^(2na ) mod n (Crepeau NPL, page 1 0, 1 . 1 1) computing 

for plaintext m (0 < m < 2'^(k-2)), computing Jacobi's symbol a^(m/n), and sending 
ciphertext (C,a) to the receiver device (Crepeau NPL, Page 5-6, L5); and 

(2) a decrypting step performed by the receiver device, of using the receiver's secret key 

(p, q, p ) to compute 

m(sub l,p) = C^(((p+1) P (sub q)^-l)/4) mod p (Crepeau NPL, Page 9, 1.9), 
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m(sub l,q) - C^(((q+1) (3 (sub p)''-d)/4) mod q (Crepeau NPL, Page 9, 1.9), 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Crepeau NPL with in the system of Rivest 
because it would speed up the calculation when enciphering and deciphering. It is obvious to 

compute m(sub l,p) = C^(((p+1) P (sub q)''-l)/4) mod p, and m(sub l,q) - C^(((q+1) p (sub 

p)^-d)/4) mod q, from C = m^(2na ) mod n when using three prime numbers because Crepeau 

NPL teaches if p E 3 (mod 4) is prime, then the solutions to x^2 E a (mod p) are r = a^(p+l)/4 

mod p; to proof, (a^(p+l)/4)^2 E a^(p-l).a (mod p) E a (mod p) (Claude NPL, page 9-10). 
Therefore it is obvious to have an encryption step performed by the sender device when using 
three prime numbers, of C = m^(2na ) mod n and compute a decryption step performed by the 

receiver device, of using the receiver's secret key (p, q, P ) to compute m(sub l,p) C^(((p+1) 

P (sub q)''-l)/4) mod p, and m(sub l,q) - C^(((qH-l) p (sub p)''-d)/4) mod q because it speeds up 
calculation when breaking things up. 

1 1.2 As per claim 4, Rivest teaches a communication system using public key cryptosystem in 
which a sender device encrypts send data by using a receiver's public key, the system 
comprising: 

(a) a sender device comprising: 

a key generating device for generating a secret key (p, q, P ) 
satisfying 

• p, q : prime integers, p E 3 (mod 4), q E 3 (mod 4) 

• p e Z, a jS E 1 (mod 1cm (p - 1, q - 1)) 

and 



Application/Control Number: 09/828,213 
Art Unit: 2136 



Page 6 



• n = p'^d q . (d > 1 is odd.) 

• k : binary length of pq 

• a e Z, 

• ae {-1,1}, 

a public key (n, k, a , a) (k is the bit length of pq) satisfying } (Rivest, Col. 13 lines 29-34; 

teaches using a modulus n which is a product of three or more primes (not necessarily distinct)); 

a communication device for sending ciphertext C to the receiver device (Rivest, Col. 4 lines 
56-67); 

a device using the receiver*s secret key (p, q, (J) to compute from the ciphertext C (Rivest 
Col. 4 lines 14-32, Rivest Col. 13 lines 29-34); and 

a device regarding as the plaintext m any of $(m(subl, p), m(sub 1, q)), $(-m(subl, p), 
m(sub 1, q)), $(m(subl, p), -m(sub 1, q)), and $(-m(subl, p), -m(sub 1, q)), that satisfies 
(x/n)=a and 0<x<2''(k-2), where * denotes ring isomorphism mapping from Z/(p)xZ/(q) to 
Z/(pq) by the Chinese remainder theorem (Rivest Col. 13 lines 29-34; teaches "Chinese 
remaindering" or any equivalent method to obtain the result modulo n in using a product of three 
or more primes); 

Rivest do not explicitly teach a device for computing 
C = m'^(2na ) mod n, 
Jacobi's symbol a=(m/n), and 

a receiver device comprising: m(sub l,p) = C'CCCp+l) |3 (sub q)^-l)/4) mod p, 

m(sub l,q) = C^^aCq+l) P (sub p)^-d)/4) mod q, 

However Crepeau NPL teaches a device for computing 
C = m'^(2na ) mod n (Crepeau NPL, page 10, 1.1 1), 



Application/Control Number: 09/828,213 
Art Unit: 2136 



Page 7 



for plaintext m satisfying a=(m/n) (0 < m < 2^(k-2)) (a=(m/n denotes Jacobi's symbol; 
and a communication device for sending ciphertext C to the receiver device (Crepeau NPL, Page 
5-6, 1.5); and 

(b) a receiver device comprising: 

m(sub l,p) - C^(((p+1) (3 (sub qr-l)/4) mod p (Crepeau NPL, Page 9, 1.9), 
m(sub l,q) - C^(((q+1) p (sub p)^-d)/4) mod q (Crepeau NPL, Page 9, L9), 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Crepeau NPL with in the system of Rivest 
because it would speed up the calculation when enciphering and deciphering. It is obvious to 

compute m(sub l,p) - C^(((p+1) p (sub q)^-l)/4) mod p, and m(sub l,q) = C^(((q+1) p (sub 

p)^-d)/4) mod q, from C = m^(2na ) mod n when using three prime numbers because Crepeau 

NPL teaches if p E 3 (mod 4) is prime, then the solutions to x^2 E a (mod p) are r = a^(p+l)/4 

mod p; to proof, (a^(p+l)/4)^2 E a^(p-l).a (mod p) E a (mod p) (Crepeau NPL, page 9-10). 
Therefore it is obvious to have an encryption step performed by the sender device when using 
three prime numbers, of C = m''(2na ) mod n and compute a decryption step performed by the 

receiver device, of using the receiver's secret key (p, q, P ) to compute m(sub l,p) = C^(((p+1) 

p (sub q)^-l)/4) mod p, and m(sub l,q) = C^(((q+1) P (sub p)''-d)/4) mod q because it speeds up 

calculation when breaking things up and using Jacobi's symbol makes easy and efficient 
calculation. 

11.3 As per claim 2, Rivest and Crepeau NPL teach all the subject matter as described above. 
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In addition Rivest teaches the communication method using public key cryptosystem, comprising 
the step of: generating and pubhcizing the pubHc information (n, k, a ) by the receiver device 
(Rivest, Col. 12 lines 59-64, Col. 13 lines 29-34). 

1 1 .4 As per claim 5, Rivest and Crepeau NPL teach all the subject matter as described above. 
In addition Rivest teaches the communication system using public key cryptosystem according to 
Claim 4, wherein the receiver device comprises a device for creating the public information (n, k, 

a , a) (Rivest, Col. 12 lines 59-64, Col. 13 lines 29-34). 

11.5 As per claim 9, Rivest and Crepeau NPL teach all the subject matter as described above. 
In addition Rivest teaches the communication method using public key cryptosystem, comprising 
the step of transforming message text to be sent to the receiver from the sender into plaintext m 
whose contents are provided with predetermined redundancy, and encrypting the plaintext m by 
the method described in Claims 1 or 4, wherein the receiver device decrypts the plaintext m by 
the method described in Claims 1 or 4 and checks the predetermined redundancy (Rivest Col. 6 
lines 4-37, abstract). 

1 1 .6 As per claim 10, Rivest and Crepeau NPL teach all the subject matter as described above. 
In addition Rivest teaches the communication method using public key cryptosystem, comprising 
the step of transforming message text to be sent to the receiver from the sender into plaintext m 
whose contents are provided with a predetermined, meaningful message, and encrypting the 
plaintext m by the method described in Claims 1 or 4, wherein the receiver device decrypts the 
plaintext m by the method described in Claims 1 or 4 and checks the contents of the 
predetermined, meaningful message (Rivest Col. 6 lines 4-37, abstract). 

11.6 As per claims 1 1 and 47, Rivest and Crepeau NPL teach all the subject matter as 
described above. 

In addition Rivest teaches the communication method using public key cryptosystem, 
wherein the value of d (d>l) is variable (Rivest Col. 4 lines 56-col. 5 lines 17). 
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1 1.7 As per claim 32, Rivest and Crepeau NPL teach all the subject matter as described above. 
In addition Crepeau NPL teaches an encryption method according to Claim 1, for computing 
ciphertext C in two different devices, comprising the steps of: 

C = x^(2a ) mod n (Crepeau NPL, page 10,1.11) 

in a device 1, after computing outputting CI to a device 2; and 

C = Cl^(n) modn 

in the device 2, by computing 

computing the ciphrtext C (Rivest, Col. 5 lines 50-col. 6 lines 3). The motivation for 
combining are the same as claim 1 above. 

11.8 As per claim 39, Rivest and Crepeau NPL teach all the subject matter as described above. 
In addition Crepeau NPL teaches the communication method using public key cryptosystem 
according to Claim 1, comprising the step of: 

creating ciphertext C by 

C = m^(2a ) mod n (Crepeau NPL, Page 10, 1.1 1) 

and creating m(sub (l,p)) and m(sub (l,q)) by 

m(sub (l,p)) - C^(((p+1) (3 )/4) mod p(Crepeau NPL, Page 9, 1.9), 

m(sub (l,q)) - C^(((q+1) (3 )/4) mod q (Crepeau NPL, Page 9, 1.9) The rational for 
combining are the same as claim 1 above. 

1 1.9 As per claim 41, Rivest and Crepeau NPL teach all the subject matter as described above. 
In addition Rivest teaches a program product, comprising: 

a program for instructing a computer to execute one of the key generating step, the 
encrypting step, and the decrypting step which are described in Claim 1 (Rivest, col. 6 lines 21- 
37); and 

a medium embodying the program (Rivest, Col. 6 lines 48-57). 
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11.10 As per claim 42, Rivest and Crepeau NPL teach all the subject matter as described above. 
In addition, Rivest teaches a communication system using public key cryptosystem which 
comprises a sender device and a receiver device and in which the sender device encrypts send 
data using a receiver's pubhc key (Rivest, Col. 2 lines 63-67), 

wherein the receiver device, using an operation unit the receiver device has, executes the 

key generating step described in Claim 1 and generates the secret key (p, q, P ) and the pubhc 

key (n, k, a ) (Rivest, Col. 13 hues 29-34), 

wherein the receiver device, using the operation unit the receiver device has, executes the 
decrypting step described in Claim 1 and obtains plaintext m (Rivest, Col. 6 lines 21-37) and 

wherein the sender device, using an operation unit the sender device has, executes the 
encrypting step described in Claim 1, computes Jacobi's symbol a=(m/n), and sends ciphertext 
(C, a) to the receiver device (Crepeau NPL, page 5-6, 1.5) The rational for combining are the 
same as claim 1 above. 

11.11 As per claim 45, Rivest, and Crepeau NPL teach all the subject matter as described 
above. In addition Rivest teaches the communication system using public key cryptosystem 
according to Claim 4, 

wherein the device of the sender device to encrypt the plaintext m provides 
predetermined redundancy to the message text to be sent to the receiver and produces the 
contents of the resuhing message text as the plaintext m (Rivest, Col. 6 lines 4-37, abstract) and 

wherein the device of the receiver device to decrypt the plaintext m checks the 
predetermined redundancy (Rivest, Col. 6 lines 4-37, abstract). 

11.12 As per claim 46, Rivest and Crepeau NPL teach all the subject matter as described above. 
In addition, Rivest teaches the communication system using public key cryptosystem according 
to Claim 4, 

wherein the sender device comprises the step of providing a predetermined, meaningful 
message to the message text to be sent to the receiver and producing the contents of the resulting 
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message text as the plaintext m, and encrypting the plaintext m by the method described in Claim 
4 (Rivest, Col. 6 lines 4-37, abstract), and 

wherein the receiver device comprises the step of decrypting the plaintext m by the 
method described in Claim and checking the contents of the predetermined, meaningful message 
(Rivest, Col. 6 lines 4-37, abstract). 

12. Claims 3, 6, 8, 12-17, 19, and 44 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Rivest et al. (Rivest, U.S. Patent 4,405,829) in view of Claude Crepeau 
(Crepeau NPL, Computer Science 308-547A Cryptography and Data Security 1998-1999), and 
in further view of Kocher et al. (Kocher, U.S. Patent No. 6,289,455 Bl). 



12.1 As per claim 12, Rivest and Crepeau NPL teach all the subject matter as described above. 
In addition Rivest teaches the method by which a sender device performs cipher communications 
by using a receiver's public key, the method comprising key generating steps of: 

generating a secret key (p, q, p ) satisfying 

• p, q : prime integers, p E 3 (mod 4), q E 3 (mod 4) 

• p e Z, a i8 E 1 (mod 1cm (p - 1, q - 1)) 

a public key (n, k, a ) (k is the bit length of pq) satisfying 

• n = pM q . (d > 1 is odd.) 

• k : binary length of pq 

• a e Z, 

f : one-way function (Rivest, Col. 13 lines 29-34; teaches using a modulus n which is a 
product of three or more primes (not necessarily distinct)); 
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from the ciphertext (C, a), computing as the send data m any of $(m(subl, p), m(sub 1, q)), 
* (-m(sub 1 , p), m(sub 1 , q)), $ (m(sub 1 , p), -m(sub 1 , q)), and $ (-m(sub 1 , p), -m(sub 1 , q)), 
that satisfies (x/n)==a and 0<x<2^(k-2), where $ denotes ring isomorphism mapping from 
Z/(p)xZ/(q) to Z/(pq) by the Chinese remainder theorem (Rivest Col. 13 hnes 29-34; teaches 
"Chinese remaindering" or any equivalent method to obtain the result modulo n in using a 
product of three or more) The motivation for combining are the same as claim 1 above; 

(1) in the sender device C = m^(2na ) mod n (Crepeau NPL, page 10, 1.1 1); 

receiver device, for send data m (0<m<2''(k-2)), computing and computing Jacobins symbol 
a=(ni/n), sending ciphertext (C, a) to the receiver device (Crepeau NPL, page 5-6, 1.5); 

(2) in the receiver device, using the receiver's secret key (p, q, P ) to compute 

m(sub l,p) - C^(((p+1) (3 (sub q)^-l)/4) mod p (Crepeau NPL, Page 9, 1.9), 

m(sub l,q) - C^(((q-M) p (sub p)^-d)/4) mod q (Crepeau NPL, Page 9, 1.9) The 
motivation for combining are the same as claim 1 above; 

Rivest and Crepeau NPL do not explicitly teach key sharing K=f(m), 

However Kocher teaches key sharing using an RSA public key (Kocher Col. 26 lines 41- 

53) 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Kocher with in the combination of Rivest and 
Crepeau NPL because it would help prevent key redistribution attacks that involve using key 
produced by one Cryptographic Rights Unit in many playback devices and it would decode the 
content if the Cryptographic Rights Unit has sufficient I/O bandwidth and computational speed 
(Kocher Col. 26 lines 41-53). It is obvious to employ the key sharing of Kocher with in the 
system of Rivest and Crepeau NPL because the teachings of Kocher would generate encryption 
or decryption key, and encrypt or decrypt the digital content and distribute it in encrypted form. 
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12.2 As per claim 15, Rivest, Crepeau NPL, and Kocher teach all the subject matter as 
described above. 

In addition Rivest teaches a method by which a sender device performs cipher communications 
by using a receiver's public key, the method comprising key generating steps of: 

generating a secret key (p, q, P ) satisfying 

• p, q : prime integers, p H 3 (mod 4), q E 3 (mod 4) 

• p e Z, a j3 E 1 (mod 1cm (p - 1, q - 1)) 

and 

• n = p^d q . (d > 1 is odd) 

• k : binary length of pq 

• a e Z, 

• f : one-way function 

a public key (n, k, a , a) (k is the bit length of pq) satisfying (Rivest, Col. 13 lines 29-34; 

teaches using a modulus n which is a product of three or more primes (not necessarily distinct)); 

from the ciphertext C, computing as the send data m any of $(m(subl, p), m(sub 1, q)), 
$(-m(subl, p), m(sub 1, q)), $(m(subl, p), -m(sub 1, q)), and $(-m(subl, p), -m(sub 1, q)), 
that satisfies (x/n)=a and 0<x<2^(k-2), where $ denotes ring isomorphism mapping from 
Z/(p)xZ/(q) to Z/(pq) by the Chinese remainder theorem (Rivest Col. 13 lines 29-34; teaches 
"Chinese remaindering" or any equivalent method to obtain the result modulo n in using a 
product of three or more prime numbers) The motivation for combining are the same as claim 1 
above; 

Crepeau NPL teaches: 

(1) in the sender device, with the receiver device, for send data m (0<m<2^(k-2)) 
satisfying a-(m/n) (a=(m/n) denotes Jacobi's symbol) (Crepeau NPL, page 5-6, 1.5), 

computing C = m''(2na ) mod n (Crepeau NPL, page 10, 1.1 1); 
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and 



(2) in the receiver device, using the receiver's secret key (p, q, p ) to compute 



m(sub l,p) 



C^(((p+1) p (sub q)^-l)/4) mod p (Crepeau NPL, Page 9, 1.9), 



m(sub l,q) 



- C^(((q+1) p (sub p)^-d)/4) mod q (Crepeau NPL, Page 9, 1.9) The 



motivation for combining are the same as claim 1 above; 

Kocher teaches key sharing, K=f(m), using an RSA public key (Kocher Col. 26 Unes 41- 
53) The rational for combining are the same as claim 12 above. 

12.3 As per claims 3, and 6 Rivest and Crepeau NPL teach all the subject matter as described 
above. 

Rivest and Crepeau NPL do not explicitly teach deleting a = p =1, a and P from the 

public key and the secret key, respectively 

However Kocher teaches key deletion that reads on the communication method (system) 

using public key cryptosystem, wherein, for a - p =1, a and p are deleted from the public key 

and the secret key, respectively (Kocher Col. 25 lines 43-58). 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Kocher with in the combination of Rivest 
and Crepeau NPL because it would ensure content providers that unauthorized users who have 
lost their authorization can not access content (Kocher Col. 25 lines 43-58). Key deletion is 
important because when a user terminates a subscription, a password (rights key) given to a user 
needs to be deleted by the content providers. Otherwise the users who have lost their 
authorization can access content after termination. 



12.4 As per claim 8, Rivest and Crepeau NPL teach all the subject matter as described above. 

Rivest and Crepeau NPL do not explicitly teach including check information for checking 
whether message text to be sent to the receiver from the sender has been correctly decrypted, 
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However Kocher teaches a checksums in a secure cryptographic rights unit (Kocher, Col. 
28 hnes 1-4) that reads on the communication method using pubUc key cryptosystem, 
comprising the step of creating the plain text m so as to include check information for checking 
whether message text to be sent to the receiver from the sender has been correctly decrypted. 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Kocher with in the combination of Crepeau 
NPL and Rivest because it would detect errors (Kocher, Col 28 lines 1-4). Checksums are 
included in stored data to detect memory corruption and write operations can be verified to 
detect errors. 

12.5 As per claim 13, Rivest, Crepeau NPL, and Kocher teach all the subject matter as 
described above. In addition Rivest teaches the key sharing method, comprising the step of: 

generating and publicizing the public information (n, k, a ) by the receiver device (Rivest, Col. 
12 lines 59-64, Col. 13 lines 29-34) 

12.6 As per claim 14, Rivest, Crepeau NPL, and Kocher teach all the subject matter as 
described above. In addition Kocher teaches the key sharing method, wherein, for a = p =1, 

a and p are deleted from the public key and the secret key, respectively (Kocher Col. 25 lines 
43-58). 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Kocher with in the combination of Rivest 
and Crepeau NPL because it would ensure content providers that unauthorized users who have 
lost their authorization can not access content (Kocher Col. 25 lines 43-58). Key deletion is 
important because when a user terminates a subscription, a password (rights key) given to a user 
needs to be deleted by the content providers. Otherwise the users who have lost their 
authorization can access content after termination. 



Application/Control Number: 09/828,213 
Art Unit: 2136 



Page 16 



12.7 As per claim 16, Rivest, Crepeau NPL, and Kocher teach all the subject matter as 
described above. In addition Rivest teaches the key sharing method according to Claim 15, 
comprising the step of: 

generating and publicizing the public information (n, k, a , a) by the receiver device 
(Rivest, Col. 12 lines 59-64, Col 13 lines 29-34). 

12.8 As per claim 17, Rivest, Crepeau NPL, and Kocher teach all the subject matter as 
described above. In addition Kocher teaches the key sharing method according to Claim 15, 

comprising the step of, for a = p = 1 , deleting a and (3 from the public key and the secret 
key, respectively (Kocher Col. 25 lines 43-58). 

12.9 As per claim 19, Rivest, Crepeau NPL, and Kocher teach all the subject matter as 
described above. In addition Rivest teaches the key sharing method according to Claim 12, 
wherein the value of d (d>l) is variable (Rivest, Col. 4 lines 56-coL 5 lines 17). 

12.10 As per claim 44, Rivest, Crepeau NPL, and Kocher teach all the subject matter as 
described above. In addition Kocher teaches a checksums in a secure cryptographic rights unit 
(Col. 28 lines 1-4) that reads on the communication system using public key cryptosystem, 
wherein the sender device comprises a device that generates the plaintext m so as to include 
check information for checking whether message text to be sent to the receiver has been 
correctly decrypted. The motivations for combining are the same as claim 8 above. 

13. Claims 20-23, 25-28, 31, 33-35, 37-38, and 40 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Rivest et al. (Rivest, U.S. Patent No. 4,405,829), in view of Claude 
Crepeau (Crepeau NPL, Computer Science 308-547A Cryptography and Data Security 1998- 
1999), and in further view of Schneier et al. (Schneier, U.S. Patent No. 5,956,404). 
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13.1 As per claim 22, Rivest, and Crepeau NPL teach all the subject matter as described 
above. In addition Rivest teaches a communication method using public key cryptosystem by 
which a sender device encrypts send data by using a receiver's public key, the method 

comprising key generating steps of: generating a secret key (p, q, p ) satisfying 

• p, q : prime integers, p E 3 (mod 4), q E 3 (mod 4) 

• 3 e Z, a |3 = 1 (mod 1cm (p - 1, q - 1)) 

and 

a pubhc key (n, k, k(sub 0), k(sub 1), a , G, H) satisfying 

• n = p^d q (d > 1 is odd) 

• k, k(sub 0), k(sub 1): k is a binary length of pq, and k(sub 0), k(sub 1) are positive 
integers with k > k(sub 0) - k(sub 1) - 2. 

• a e Z 

• G: {0,1 }^(k sub 0) ^ {0,1 }^(k - (k sub 0) - 2) 

H: {0,l}''(k-(ksub0)-2) ^ {0,1 }^(k sub 0) (Rivest, Col. 1 3 lines 29-34; teaches using a 
modulus n which is a product of three or more primes (not necessarily distinct)); 

from the ciphertext (C, a), computing y that satisfies (y/n) = a and 0 < y < 2'^(k-2) of 
$(x(subl, p), x(sub 1, q)), $(-x(subl, p), x(sub 1, q)), $(x(subl, p), -x(sub 1, q)), and $(- 
x(sub 1 , p), -x(sub 1 , q)), where $ denotes ring isomorphism mapping fi-om Z/(p)xZ/ (q) to 
Z/(pq) by the Chinese remainder theorem (Rivest Col. 13 lines 29-34; teaches "Chinese 
remaindering" or any equivalent method to obtain the result modulo n in using a product of three 
or more prime numbers) The motivation for combining are the same as claim 1 above; 

Crepeau NPL teaches: (1) in the sender device, computing 

for plain text m (m e {0,1)^(1), 1 = k - (k sub 0) - (k sub 1) - 2) and a random number r(r 

e {0,l}^(ksub0)) 

C = x'^(2na ) mod n (Crepeau NPL, page 10, 1.11); 
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computing 

and further computing Jacobi's symbol a=(x/n), and sending ciphertext (C, a) to the 
receiver device (Crepeau NPL, page 5-6, 1.5); and 

(2) in the receiver device, using the receiver's secret key (p, q, P ) to compute 

x(sub (l,p)) = C^(((p+1) p (sub q)^-l)/4) mod p (Crepeau NPL, Page 9, 1.9), 

x(sub (l,q)) = C^(((q+1) p (sub p)''-d)/4) mod q (Crepeau NPL, Page 9, 1.9) The 
motivation for combining are the same as claim 1 above; 

Rivest, and Crepeau NPL do not explicitly teach: 

X = (mO^(k sub 1) G G(r)) || (r O H(mO^(k sub 1) O G(r))) 

Wheny = s||t(se {0,l}^(k-(ksub0)-2,te {0,l}^(k sub 0)), 

Computing z = G(H(s) O t) O s, 

m = { [z]^I if [z] (k sub 1) = 0^(k sub 1) "reject" otherwise 
and decrypting the plaintext m by 

where ([aj-^k and [(a sub k)] denote first k-bits and last k-bits of a, respectively 

However Schneier teaches the method of hashing the message to form message bits by padding 
(Schneier, Col. 3 lines 50-64) that reads on X = (mO^(k sub 1) O G(r)) || (r O H(mO^(k sub 1) 

O G(r))) 

When y = s||t (s e {0,1 }^(k - (k sub 0) -2, t e {0,1 }^(k sub 0)), 
Computing z = G(H(s) O t) O s, 

m = { [z]^I if [z] (k sub 1) = 0'^(k sub 1) "reject" otherwise and decrypting the 
plaintext m by 

where ([aj'^k and [(a sub k)] denote first k-bits and last k-bits of a, respectively 
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Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Schneier with in the combination system of 
Rivest and Crepeau NPL because it would ensure that the encryption becomes extremely 
difficult to break (Col. 3 lines 50-65). Padding or concatenating or adding more bits to the 
hashed message would increase the size of the bits and would create a strong audit trail for the 
device token. There fore it is obvious to one ordinary skilled in the art at the time the invention 
was made to have padding or adding more bits to the system because it would enhance security. 

13.2 As per claim 25, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches a communication method using public key 
cryptosystem by which a sender device encrypts send data by using a receiver's public key, the 
method comprising key generating steps of: generating a secret 

• p, q : prime integers, p E 3 (mod 4), q E 3 (mod 4) 

• P e Z, a iS E 1 (mod 1cm (p - 1, q - 1)) 
Key (p, q, P ) satisfying 

and 

a public key (n, k, k(sub 0), k(sub 1), a , G, H) satisfying 

• n = p^d q (d > 1 is odd) 

• k, k(sub 0), k(sub 1) e Z: k is a binary length of pq, and k(sub 0), k(sub 1) are positive 
integers with k > k(sub 0) - k(sub 1) - 2. 

• a e Z 

• a e {-1,1} 

• G: {0,l}^(ksubO) {0,l}^(k- (k sub 0)-2) 

H: {0,1}^( k - (k sub 0) - 2) ^ {0,l}'^(k sub 0) (Rivest, Col. 13 lines 29-34; teaches using a 
modulus n which is a product of three or more primes (not necessarily distinct)); 
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from the ciphertext (C), computing y that satisfies (y/n) = a and 0 < y < 2^(k-2) of 
*(x(subl, p), x(sub 1, q)), $(-x(subl, p), x(sub 1, q)), $(x(subl, p), -x(sub 1, q)), and 
x(subl, p), -x(sub 1, q)), where $ denotes ring isomorphism mapping from Z/(p)xZ/(q) to 
Z/(pq) by the Chinese remainder theorem, (Rivest Col. 13 hnes 29-34; teaches "Chinese 
remaindering" or any equivalent method to obtain the result modulo n in using a product of three 
or more prime numbers) The motivation for combining are the same as claim 1 above; 

Crepeau NPL teaches: (1) in the sender device, computing 

that satisfies a = (x/n) for plaintext m(m e {0,1)^1, 1 k-kO-kl-2) and a random number r(r 

e {0,1 }^kO) (a = (m/n) denotes Jacobi's symbol), (Crepeau NPL, page 5-6, 1 .5); computing 

C = x^(2na ) mod n (Crepeau NPL, page 10, 1.1 1); 
and further sending ciphertext C to the receiver device; and 

(2) in the receiver device, using the receiver's secret key (p, q, 3 ) to 

x(sub (l,p)) - C^(((p+1) p (sub q)^-l)/4) mod p, (Crepeau NPL, Page 9, 1.9) 

x(sub (l,q)) = C^(((q+1) p (sub p)^-d)/4) mod q, (Crepeau NPL, Page 9, 1.9) The 
motivation for combining are the same as claim 1 above; 

Rivest, and Crepeau NPL do not explicitly teach: compute 
X - (mO^(k sub 1) O G(r)) || (r O H(mO^(k sub 1) O G(r))) 

Wheny = s||t(se {0,l}^(k-(k sub 0)-2, t e {0,l}^(k sub 0)) 

z = G(H(s) O t) O s. 
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However Schneier teaches the method of hashing the message to form message bits by padding 
(Schneier, Col. 3 Hnes 50-64) that reads on X = (mO^(k sub 1) O G(r)) || (r O H(mO^(k sub 1) 

O G(r))) 

Wheny-s||t(se {0,l}^(k - (k sub 0) -2, t e {0,l}^(k sub 0)) 

z = G(H(s) O t) O s, 
computing 

m = { [z]^I if [z] (k sub 1) = 0^(k sub 1) "reject" otherwise and decrypting the 
plaintext m by 

where ([aj'^k and [(a sub k)] denote first k-bits and last k-bits of a, respectively. The rational 
for combining are the same as claim 22 above. 

13.3 As per claim 27, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches a communication method using public key 
cryptosystem by which a sender device encrypts send data by using a receiver's public key, the 

method comprising key generating steps of: generating a secret key (p, q, P ) satisfying 

• p, q : prime integers, p E 3 (mod 4), q E 3 (mod 4) 

• (3 e Z, a jS E 1 (mod 1cm (p - 1, q - 1)) 

and 

a public key (n, k, k(sub 0), k(sub 1), a , G, H) satisfying 

• n = p-^d q (d > 1 is odd) 

• k, k(sub 0), k(sub 1) e Z: k is a binary length of pq, and k(sub 0), k(sub 1) are positive 
integers with k > k(sub 0) - k(sub 1) - 2. 

• a e Z 

• G: {0,l}^(ksubO) ^ {0,l}^(k-(ksub 0)-2) 
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• H: {0,1}^( k - (k sub 0) - 2) ^ {0,l}^(k sub 0) (Rivest, Col. 13 lines 29-34; teaches 
using a modulus n which is a product of three or more primes (not necessarily distinct)); 

sending ciphertext C to the receiver device (Rivest, Col. 4 lines 56-67); 

from the ciphertext C, for yl = $(x(subl, p), x(sub 1, q)), $(-x(subl, p), x(sub 1, q)), 
$(x(subl, p), -x(sub 1, q)), and ^►(-x(subl, p), -x(sub 1, q)), where $ denotes ring 
isomorphism mapping from Z/(p)xZ/(q) to Z/(pq) by the Chinese remainder theorem (Rivest Col. 
13 lines 29-34; teaches "Chinese remaindering" or any equivalent method to obtain the result 
modulo n in using a product of three or more prime numbers) The motivation for combining are 
the same as claim 1 above; 

Crepeau NPL teaches: (1) in the sender device, computing 

for plaintext m(m e {0,1 }^1, 1 - k-kO-kl-2) and a random number r(r e {0,1 }^kO) 

C = x^(2na ) mod n (Crepeau NPL, page 10, LI 1); 
computing 

(2) in the receiver device, using the receiver's secret key (p, q, P ) to 

x(sub (l,p)) - C^(((p+1) p (sub q)^-l)/4) mod p (Crepeau NPL, Page 9, 1.9), 

x(sub (l,q)) = C^(((q+1) P (sub p)^-d)/4) mod q (Crepeau NPL, Page 9, L9) The 
motivation for combining are the same as claim 1 above; 

Rivest, and Crepeau NPL do not explicitly teach: compute 

X - (mO^(k sub 1) O G(r)) || (r O H(mO^(k sub 1) O G(r))) 

When y = s||t (s e {0,l}^(k - (k sub 0) -2, t (sub i) e {0,l}^(k sub 0), 1 <= i <=4) 

z (sub i) = G(H(s (sub i) O t (sub i)) O s (sub i), (1<= i <= 4) 

However Schneier teaches the method of hashing the message to form message bits by padding 
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(Schneier, Col. 3 lines 50-64) that reads on X = (mO^(k sub 1) O G(r)) || (r O H(mO^(k sub 1) 
O G(r))) 

When y = s||t (s e {0,1 }^(k - (k sub 0) -2, t (sub i) e {0,1 }^(k sub 0), 1 <= i <-4) 

z (sub i) = G(H(s (sub i) O t (sub i)) O s (sub i), (1<= i <= 4) 
computing 

m = { [z (sub ij'^i if [z (sub i)] (k sub 1) = 0^(k sub 1) "reject" otherwise and 
decrypting the plaintext m by 

where ([a]^k and [(a sub k)] denote first k-bits and last k-bits of a, respectively. The 
rational for combining are the same as claim 22 above. 

13.4 As per claim 34, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches a communication method using public key 
cryptosystem by which a sender device encrypts send data by using a receiver's public key, the 
method comprising key generating steps of: generating a secret 

• pi : prime integers, (pi E 3 (mod 4), 1 <= i<= h) 

• p e Z, a |8 E 1 (mod 1cm (p - 1, q - 1)) 

key (pi, p ) (l<=i<=h) satisfying 

and 

a public key (n, k, k(sub 0), k(sub 1), a , G, H) satisfying 

• n=ir(h)(sub(i=l))pi 

• k, k(sub 0), k(sub 1) e Z: k is a binary length of pq, and k(sub 0), k(sub 1) are positive 
integers with k > k(sub 0) - k(sub 1) - 2. 

• a e Z 

• G: {0,l}^(k sub 0) ^ {0,l}^(k - (k sub 0) ) 
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• H: {0,1 }^( k - (k sub 0) ) {0,1 }^(k sub 0) (Rivest, Col. 13 lines 29-34; teaches 
using a modulus n which is a product of three or more primes (not necessarily distinct)); 
sending ciphertext C to the receiver device (Rivest, Col. 4 lines 56-67); 
decrypting the plaintext m by: where $ denotes ring isomorphism mapping from 
Z/(p)xZ/(q) to Z/(pq) by the Chinese remainder theorem, and ([a]^k and [(a sub k)] denote first 
k-bits and last k-bits of a, respectively(Rivest Col. 13 lines 29-34; teaches "Chinese 
remaindering" or any equivalent method to obtain the result modulo n in using a product of three 
or more prime numbers) The motivation for combining are the same as claim 1 above; 

Crepeau NPL teaches: (1) in the sender device, computing 

for plaintext m(m e {OJI'^l, 1 = k-kO-kl -2) and a random number r(r e {0,l}^kO) 

C ^ x^(2na ) mod n (Crepeau NPL, page 10, 1.1 1); 

(2) in the receiver device, using the receiver's secret key (pi, P ) (l<=i<=h) to compute 

x(sub (i)) = C^(((p(sub i)-f 1) p )/4) mod p (Crepeau NPL, Page 9, 1.9) The 
motivation for combining are the same as claim 1 above; 

Rivest, and Crepeau NPL do not expUcitly teach: compute 
X - (mO^(k sub 1) O G(r)) || (r O H(mO^(k sub 1) O G(r))) 

from the ciphertext C, for 2^h pieces of {$(elxl,e2x2,...,ehxh)| el,...,ehe {-1,1}} 

when yl = s(sub i)|| t(sub i) (s(sub i) e {0,l}^(k sub 0), l<=i<=2^h) 

computing z (sub i) = G(H(s (sub i) O t (sub i)) O s (sub i), (1<= i <= 2^h) 
m - { [z (sub i]^i if [z (sub i)] (k sub 1) = 0^(k sub 1) "reject" otherwise 

However Schneier teaches the method of hashing the message to form message bits by padding 
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(Schneier, Col. 3 lines 50-64) that reads on X = (mO^(k sub 1) O G(r)) || (r O H(mO^(k sub 1) 
O G(r))) 

from the ciphertext C, for 2^h pieces of {$(elxl,e2x2,...,ehxh)| el,...,ehe {-1,1}} 
when yl = s(sub i)|| t(sub i) (s(sub i) e {0,l}^(k sub 0), l<=i<=2^h) 

computing z (sub i) = G(H(s (sub i) O t (sub i)) O s (sub i), (1<= i <= 2^h) 

m ^ { [z (sub i]^i if [z (sub i)] (k sub 1) = 0^(k sub 1) "rejecf otherwise. The motivation 
for combining are the same as claim 22 above. 

13.5 As per claim 20, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. Li addition Schneier teaches the encryption method in public key cryptosystem, 
wherein one or more hash functions are publicized and the sender device comprises the steps of: 
creating plaintext and random number information (Schneier, Col. 3 lines 65-col. 4 lines 

26); 

performing exclusive OR and data concatenation operations on the plaintext and the 
random number information (Schneier, Col. 7 lines 61-col. 8 lines 17); 

inputting results obtained by the operations to a relevant hash function and computing the 
input results (Schneier, Col. 3 lines 50-64); 

performing exclusive OR and data concatenation operations on the plaintext, the random 
number information, and the results of input to the hash function (Schneier, Col. 3 lines 65-coL 4 
lines 26, col. 5 lines 42-53, col. 8 lines 9-16); and 

replacing the results of the operations in a location of the plaintext m in Claim 1 or the 
location of a random number r, and performing encryption according to the procedure of the 
public key cryptosystem in Claim l(Schneier, col. 3 lines 50-64). 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Schneier with in the combination system of 
Rivest and Crepeau NPL because it would perform an encryption scheme that has a strong audit 
trail while not wasting a lot of the valuable message space (Schneier, Col. 3 lines 35-37). It 
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would provide a strong audit trail for an encryption scheme that does not waste any of the 
valuable message space based on the ID of the public-private key or encryption scheme. 

13.6 As per claim 21, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Schneier teaches a decryption method in public key cryptosystem, 
for decrypting ciphertext encrypted by the method set forth according to Claim 20, the method 
comprising: 

the decrypting step set forth in Claim 1 (Schneier, Col. 1 lines 28-65); 

a step of restoring the plaintext m from the results of the logical OR and data 
concatenation operations performed in Claim 20 (Schneier, Col. 1 lines 28-65); 

a step of verifying the validity of the procedure of the (exclusive OR and data 
concatenation) operations (Schneier, Col. 3 lines 50-64); and 

a step of outputting decryption results (Schneier, Col 1 hnes 45-65). The rational for 
combining are the same as claim 20 above. 

13.7 As per claim 23, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches the communication method using public key 
cryptosystem according to Claim 22, comprising the step of: 

generating and publicizing the public information (n, k, kO, kl, a , G, H) by the receiver 
device (Rivest, Col. 12 lines 59-64, col. 13 lines 19-34). 

13.8 As per claim 26, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches the communication method using public key 
cryptosystem according to Claim 25, comprising the step of: 

generating and publicizing the public information (n, k, kO, kl, a , a , G, H) by the 
receiver device (Rivest, Col. 12 Unes 59-64, Col. 13 lines 29-34). 
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13.9 As per claim 28, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches the communication method using public key 
cryptosystem according to Claim 27, comprising the step of: 

generating and publicizing the public information (n, k, kO, kl, a , G, H) by the receiver 
device (Rivest, Col. 12 lines 59-64, Col. 13 lines 29-34). 

13.10 As per claim 31, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches the communication method using public key 
cryptosystem according to Claim 22, wherein the value of d (d>l) is variable (Rivest, Col. 4 
Unes 56- col 5 lines 17). 

13.11 As per claim 33, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. An encryption method according to Claim 22, for computing ciphertext C in 
two different devices, comprising the steps of: 

Schneier teaches the method of hashing the message to form message bits by padding 

(Schneier, Col. 3 lines 50-64) that reads on X - (mO^(k sub 1) O G(r)) || (r O H(mO^(k sub 1) 
OG(r))), 

in a device 1, computing 

for plaintext m(me {0,1}^1, 1 - k-kO-k 1-2) and a random number r(re {0,l}^kO) 

C = x^(2a ) mod n (Crepeau NPL, page 10, LI 1) 

and after further computing 
outputting CI to a device 2; and 
in the device 2, by computing 
C = Cl^(n) modn 

computing the ciphertext C (Rivest Col. 4 lines 56- col. 5 lines 17). The rational for 
combining are the same as claim 22 above. 
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13.12 As per claim 35, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches the communication method using public key 
cryptosystem according to Claim 34, comprising the step of: 

generating and publicizing the public information (n, k, kO, kl, a , G, H) by the receiver 
device (Rivest, col. 12 Unes 59-64, coL 13 lines 29-34). 

13.13 As per claim 37, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches the communication method using public key 
cryptosystem according to Claim 34, comprising the step of: 

sending the plaintext or the identification information of x along with ciphertext, or 
creating the plaintext m or x from publicized identification information (Rivest, Abstract). 

13.14 As per claim 38, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Rivest teaches the communication method using public key 
cryptosystem according to Claim 37, comprising the step of: 

decrypting the plaintext m or the x from the ciphertext using the identification 
information sent along with the ciphertext or the publicized identification information (Rivest, 
Col. 5 lines 60-65). 

13.15 As per claim 40, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. In addition Crepeau NPL teaches the communication method using public key 
cryptosystem according to Claim 22, comprising the step of: 

creating ciphertext C by 

C = x^(2a ) mod n (Crepeau NPL, Page 10, 1.1 1) 

and creating m(sub (l,p)) and m(sub (l,q)) by 

m(sub (l,p)) = C^(((p+1) (3 )/4) mod p (Crepeau NPL, Page 9, 1.9), 

m(sub (l,q)) - C^(((q+1) 3 )/4) mod q (Crepeau NPL, Page 9, 1.9) The rational for 
combining are the same as claim 22 above. 
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14. Claims 7, and 43 are rejected under 35 U.S.C. 103(a) as being unpatentable over Rivest et 
al. (Rivest, U.S. Patent 4,405,829) in view of Claude Crepeau (Crepeau NPL, Computer Science 
308-547 A Cryptography and Data Security 1998-1999), and in further view of Frank Rubin 
(Rubin 1994, The Quadratic and Double Quadratic Residue Ciphers (NPL) December 4, 1994). 

42.1 As per claims 7, and 43, Rivest and Crepeau NPL teach all the subject matter as 
described above. 

Rivest and Crepeau NPL do not explicitly teach the step of creating the secret keys p and q by 
p=2p'+l and q==2q'+l, where p' and q* are prime integers, 

However Rubin 1999 teaches the communication method using public key cryptosystem, 
comprising the step of creating the secret keys p and q by p=2p*+l and q=2q'+l, where p' and q' 
are prime integers (Page 5 par. 5). 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Rubin 1994 with in the combination system 
of Rivest and Crepeau NPL because it would make the sequence cryptographically secure (Page 
5 par. 5). 

15. Claim 18, is rejected under 35 U.S.C. 103(a) as being unpatentable over Rivest et al. 
(Rivest, U.S. Patent 4,405,829), and Claude Crepeau (Crepeau NPL, Computer Science 308- 
547A Cryptography and Data Security 1998-1999), and in view of Kocher et al. (Kocher, U.S. 
Patent No. 6,289,455 Bl), and in further view of Frank Rubin (Rubin 1994, The Quadratic and 
Double Quadratic Residue Ciphers (NPL) December 4, 1994). 

43. 1 As per claim 1 8, Rivest, Crepeau NPL, and Kocher teach all the subject matter as 
described above. 

Rivest, Crepeau NPL, and Kocher do not explicitly teach the step of creating the secret 
keys p and q by p=2p*+l and q=2q'+l, where p* and q* are prime integers, 
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However Rubin 1999 teaches the step of creating the secret keys p and q by p=2p'+l and 
q=2q*+l, where p' and q* are prime integers (Page 5 par. 5). 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Rubin 1994 with in the combination system 
of Rivest, Crepeau NPL, and Kocher because it would make the sequence cryptographically 
secure (Page 5 par. 5). 

16. Claims 24, 29, and 36 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Rivest et al. (Rivest, U.S. Patent No. 4,405,829), and Claude Crepeau (Crepeau NPL, Computer 
Science 308-547 A Cryptography and Data Security 1998-1999), in view of Schneier et al. 
(Schneier, U.S. Patent No. 5,956,404), and in further view of Kocher et al. (Kocher, U.S. Patent 
No. 6,289,455 Bl). 

36.1 As per claims 24, 25, and 36 Rivest, Crepeau NPL, and Schneier teach all the subject 
matter as described above. 

Rivest, Crepeau NPL, and Schneier do not exphcitly teach deleting a and (3 from the 

public key and the secret key, respectively, 

However Kocher teaches key deletion that reads on the communication method using 

public key cryptosystem, comprising the step of, for a =p =1, deleting a and P from the 

pubhc key and the secret key, respectively (Kocher Col. 25 lines 43-58). 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Kocher with in the combination of Rivest, 
Crepeau NPL, and Schneier because it would ensure content providers that unauthorized users 
who have lost their authorization can not access content (Kocher Col. 25 lines 43-58). Key 
deletion is important because when a user terminates a subscription, a password (rights key) 
given to a user needs to be deleted by the content providers. Otherwise the users who have lost 
their authorization can access content after termination. 
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17. Claim 30, is rejected under 35 U.S.C. 103(a) as being unpatentable over Rivest et al. 
(Rivest, U.S. Patent 4,405,829), and Claude Crepeau (Crepeau NPL, Computer Science 308- 
547A Cryptography and Data Security 1998-1999), and in view of Schneier et al. (Schneier, U.S. 
Patent No. 5,956,404), and in further view of Frank Rubin (Rubin 1994, The Quadratic and 
Double Quadratic Residue Ciphers (NPL) December 4, 1994). 

18. As per claim 30, Rivest, Crepeau NPL, and Schneier teach all the subject matter as 
described above. 

Rivest, Crepeau NPL, and Schneier do not expHcitly teach the step of creating the secret 
keys p and q by p 2p'+l and q = 2q'+l, where p' and q' are prime integers, 

However Rubin 1999 teaches the step of creating the secret keys p and q by p = 2p'+l 
and q ^ 2q'+l, where p' and q* are prime integers (Page 5 par. 5). 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Rubin 1994 with in the combination system 
of Rivest, Crepeau NPL, and Schneier because it would make the sequence cryptographically 
secure, provided that the sequence is longer than the message (Page 5 par. 5). 

19. Any inquiry concerning this communication or earlier conraiunications from the 
examiner should be directed to Eleni A Shiferaw whose telephone number is 703-305-0326. The 
examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R Sheikh can be reached on 703-305-9648. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
appUcations is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Eleni Shiferaw , 
Art Unit 2136 i^^W^^-w^ 
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